Jack Singleton

Merged! We will have to think about how to look up MX records as currently our login depends on the server being able to send emails

Yeah you're right it wouldn't make sense to run the MTA locally when running in this mode. This might not be a problem then.

lets look at https://labs.riseup.net/code/projects/backupninja

also, http://duplicity.nongnu.org/index.html (which looks like an option in backupninja but is interesting in and of itself as it's the one that supports gnupg encrypting incremental backups)

lets take a look at the headers that securedrop has set: https://github.com/freedomofpress/securedrop/blob/2a3c93cf0fa3be87cd77bc8be2ebfb9ced2fc54f/install_files/ansible-base/roles/app/templates/sites-available/source.conf they aggressively disable caching for example. might be a good idea

https://we.riseup.net/debian/privacy

https://riseup.net do not embed the IP address of the sender and even have onion addresses for their servers.

I think we should just recommend always using an external MTA that you can rely on when running a hidden service you want to remain anonymous.

Currently we just rely on configuration inside the Sandstorm admin console to allow us to enter an outgoing SMTP server (as in, a manual process). Not sure if sandstorm has...

I think we still want to configure ip6tables: From https://wiki.archlinux.org/index.php/IPv6#Other_programs > Disabling IPv6 functionality in the kernel does not prevent other programs from trying to use IPv6. In > most...